Symantec Velociraptor vulnerabilities

7 CVEs affecting Symantec Velociraptor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0817, published 2005-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1463, published 2003-06-09. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial…
CVE-2004-0369, published 2004-12-31. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote…
CVE-2002-2294, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote…
CVE-2002-2317, published 2002-12-31. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
CVE-2002-0990, published 2002-10-28. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of…
CVE-2002-0538, published 2002-07-03. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports,…
CVE-2005-0817, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to…